Debian DLA-2908-1 : librecad - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2908 advisory. Several security vulnerabilities have been discovered in librecad, a computer-aided design CAD system. Buffer overflows may lead to remote code execution if a...

Debian DLA-2907-1 : apache2 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2907 advisory. - A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer dereference or, for configurations mixing forward and...

Debian DLA-2906-1 : python-django - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2906 advisory. It was discovered that there were two vulnerabilities in Django, a popular Python-based web development framework: CVE-2022-22818 Possible XSS via % debug % templa...

Ubuntu 16.04 ESM : Cron vulnerabilities (USN-5259-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5259-1 advisory. It was discovered that the postinst maintainer script in Cron unsafely handled file permissions during package install or update operations. An attacker...

Ubuntu 18.04 LTS : Samba vulnerability (USN-5260-2)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5260-2 advisory. Orange Tsai discovered that the Samba vfsfruit module incorrectly handled certain memory operations. A remote attacker could use this issue to cause Samba to cras...

Debian DLA-2898-1 : nss - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2898 advisory. It was found that nss, the Mozilla Network Security Service library, was vulnerable to a NULL pointer dereference when parsing empty PKCS 7 sequences, which could result in...

Debian DLA-2902-1 : graphicsmagick - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2902 advisory. - GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c. CVE-2020-12672 Note that Nessus has not tested for this issue but has...

Debian DLA-2900-1 : lrzsz - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2900 advisory. - lrzsz before version 0.12.21rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a sizet to wrap around...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

PwnKit Vulnerability - Local Privilege Escalation - Title:...

Exploit for Incomplete Cleanup in Linux Linux_Kernel

CVE-2021-4032-NoGCC Test in: Ubuntu 20...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4032-NoGCC Test in: Ubuntu 20...

Ubuntu 20.04 LTS : WebKitGTK vulnerabilities (USN-5255-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5255-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a...

USN-5255-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

CVE-2021-46088

Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution RCE. Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user...

USN-5247-1: Vim vulnerabilities

It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. This issue only affected Ubuntu 21.10. CVE-2021-3973 It was...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

Information Exploit Title: Local Privilege Escalation i...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

pkexec-lpe-poc POC for CVE-2021-4034 Original Write...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Exploit Usage bash $ git clone https:...

[SECURITY] [DLA 2883-2] uriparser security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2883-2 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 26, 2022 https://wiki.debian.org/LTS -...

Ubuntu 16.04 ESM : PolicyKit vulnerability (USN-5252-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5252-2 advisory. USN-5252-1 fixed a vulnerability in policykit-1. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted th...